Symfonos 4 || VulnHub Walkthough

Hello, everyone! Welcome back to our VulnHub Walkthrough series. In today’s video, we’ll continue exploring the exciting VulnHub collection with SymfonOS. Specifically, we’re diving into the 4th virtual machine in the series, SymfonOS 4. This intermediate, OSCP-like, real-world scenario machine is designed to emphasize the importance of understanding vulnerabilities, and how to exploit them effectively. To Learn More: https://www.cybersecmastery.in/2024/1... Contribute to growing: https://www.buymeacoffee.com/mrdev ========================================= Time Stamp ========================================= 0:00 Introduction 0:41 Settings Up 2:29 Enumeration 2:30 Identify the IP address and Conduct Network Scan 4:40 Web Enumeration and Directory Busting 7:19 Bypass Authentication using SQL Injection and Enumerating the Dashboard 9:02 Examining the URL Structure for Systematic Confirmation of LFI Vulnerability 10:21 Brute forcing the LFI vulnerability file path 12:44 Exploitation 12:45 Testing for Log Poisoning in SSH Logs 13:07 Leveraging SSH Log Poisoning with PHP RCE Injection 15:55 Foothold 15:56 Establish a Reverse Shell 17:42 Investigate the Target Directory 19:18 Privilege Escalation 19:19 Enumerating System Information 20:42 Analyzing Privilege Escalation Potential via the DIP Group 21:41 Exploiting DIP Group via Tunneling 25:08 Investigating the Cookie for Potential Deserialization Exploits 25:36 Privilege Escalation via Deserialization of Serialized Session Cookies 27:41 Verify the Privilege and obtain the Flag =============================================== Find me: Instagram:  / amit_aju_   Facebook page:   / technoscinfo   Linkedin:   / amit-kumar-giri-52796516b   Chat with Telegram:https://t.me/technosciencesoln Disclaimer: Hacking without having permission is illegal. This channel is strictly educational for learning about cyber-security in the areas of ethical hacking and penetration testing so that we can protect ourselves against real hackers.